Privacy Policy

This Privacy Policy explains how ProjectThunder.com, Inc. ("we", "us") handles personal information in connection with the BidGlory website and services. We do not sell or "share" personal information (as those terms are defined under the CCPA/CPRA).

1. Scope & roles

This policy covers information we handle as a business/controller — visitors to bidglory.com, account holders, and subscribers. For data a hosting customer enters into their BidGlory instance (bids, clients, catalog, etc.), the customer is the controller and we act only as a processor on the customer's instructions under the Subscription & Support Terms; that customer data is governed by the customer's own privacy practices.

2. Information we collect

• Account & community. Username, email, and a salted-hashed password; forum posts, comments, and votes you submit.
• Demo & contact. Name, company, email, phone (optional), trade, team size, and what you tell us.
• Billing. Subscriptions are processed by PayPal. We receive confirmation of a subscription and its status; we never receive or store your card or bank details — PayPal handles payment data under its own privacy policy.
• Usage. Privacy-friendly, cookieless web analytics (Cloudflare Web Analytics) — aggregate page and performance data, no cross-site tracking.
• Support. Correspondence and information you provide when you contact us.

3. How we use it

To provide, secure, and improve the service; create and manage accounts and subscriptions; respond to demos and support; send service and transactional messages; prevent abuse and fraud; and comply with law. We may create and use aggregated or de-identified data (which is not personal information) for any lawful purpose, including improving BidGlory.

4. Legal bases (GDPR/UK GDPR)

Where the GDPR applies, we rely on: performance of a contract (to provide the service you request); legitimate interests (to run, secure, and improve our business, on balance with your rights); consent (where required, e.g. certain marketing — withdrawable at any time); and legal obligation.

5. Sharing & processors

We share personal information only with service providers who process it on our behalf under contract, including PayPal (payments), our hosting/email providers, and Cloudflare (analytics). AI features are opt-in and bring-your-own-model; bid contents are sent to a language-model endpoint only if you configure and invoke one. We may disclose information to comply with law, enforce our terms, or protect our rights, and in a merger or asset sale. We do not sell or share personal information for cross-context behavioral advertising.

6. Retention

We keep personal information for as long as needed to provide the service and for legitimate business and legal purposes (e.g. accounts while active, plus a reasonable period; billing records as required by law). We may retain aggregated/de-identified data indefinitely.

7. Your rights

EEA/UK (GDPR): access, rectification, erasure, restriction, portability, objection, and the right to lodge a complaint with a supervisory authority. California (CCPA/CPRA): the right to know, delete, and correct personal information, to opt out of sale/sharing (we do none), and to non-discrimination for exercising your rights. Because we do not sell or share, no "Do Not Sell" action is required, but you may still exercise the other rights. Exercise any right by emailing privacy@bidglory.com; we will verify your request and respond within the timeframes required by law. For customer-controlled hosted data, direct requests to the relevant customer (the controller).

8. International transfers

We operate in the United States, and information may be processed there and by our providers. Where required, transfers rely on appropriate safeguards such as the Standard Contractual Clauses.

9. Security

We use reasonable technical and organizational measures — passwords are salted and hashed (PBKDF2), API tokens are stored only as hashes, and access is restricted. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.

10. Children

BidGlory is a business tool not directed to children under 16, and we do not knowingly collect their personal information.

11. Changes

We may update this policy from time to time; the effective date above will change and, where required, we will provide notice. Continued use after the effective date constitutes acceptance.

12. Contact

Questions or requests: privacy@bidglory.com, ProjectThunder.com, Inc. This policy is governed by the laws of the State of California, consistent with our other terms.